$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer File: 8b56caea-2136-4342-baff-6f31268d4cc4.cer (raw, json) Hash identifier: ZHCKR72Ona7/9hbRje2xwyAc2nEaOUrRojj7bPPdpBQ= Subject key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858476B50D64E0D2CE1CA6DAC1080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Oct 2024 13:54:19 +0000 Certificate not after: Sat 24 Jan 2026 01:45:15 +0000 Subordinate resources: IP: 23.146.24.0/24 IP: 140.235.4.0/22 IP: 2602:faaf::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:50:d6:4e:0d:2c:e1:ca:6d:ac:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 3 13:54:19 2024 GMT Not After : Jan 24 01:45:15 2026 GMT Subject: CN=8b56caea-2136-4342-baff-6f31268d4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:d1:4d:5a:d2:d9:d1:ea:e6:2b:64:4c:8f: 80:9b:a6:6e:d6:b9:27:a7:3d:e0:d9:94:84:1c:ef: 5c:af:26:c8:6d:20:f8:28:c8:24:01:2e:a0:59:e5: 82:9c:61:ea:94:2b:e0:30:c6:9d:5d:a7:1f:84:ad: 65:4b:86:8e:37:c6:ec:62:ba:3f:91:86:8e:e8:6a: ab:95:67:0d:f7:3c:34:57:2c:83:6d:80:19:80:5b: fb:6e:2c:d6:8f:c8:93:1f:0e:80:15:3c:52:1d:9b: 21:d2:2b:d6:69:3e:68:8d:a7:b7:5a:27:17:ed:5e: 8e:f8:6a:14:25:2b:fa:68:78:97:d0:24:45:94:42: f7:26:a0:94:50:f6:71:42:30:12:86:fa:71:dc:50: 55:84:36:41:6b:fb:c1:ac:a7:40:97:96:68:7b:7a: cf:63:c5:ef:f1:87:ac:67:60:b6:15:4d:78:df:55: 70:60:31:ca:3f:25:ae:ae:8b:46:5c:94:7d:69:c3: 31:3b:20:1e:e1:dd:00:31:38:7f:52:5f:8b:f3:c3: 09:e4:5a:a1:33:e0:36:5c:81:1e:ce:84:92:fb:20: ed:e1:f3:0b:af:c2:59:65:dc:54:15:a7:db:99:9c: 17:aa:ae:0c:fc:f8:fa:81:d5:f5:ce:12:da:aa:df: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.24.0/24 140.235.4.0/22 IPv6: 2602:faaf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d5:36:23:f6:1d:d8:67:d7:b8:e1:8e:5a:1a:2a:1a:b7:0c: f2:4d:1d:2f:aa:d9:51:3d:62:78:16:cd:f9:3e:43:ef:3c:ae: 4d:cd:41:29:cf:bb:e1:3c:5d:33:d6:ed:eb:e0:e2:5b:a9:fb: 61:67:20:d5:81:9a:96:8a:82:22:43:b6:07:58:89:07:29:4e: 7a:bf:ca:37:2a:d2:7c:3b:ca:81:55:41:0c:95:13:82:b0:2a: 3d:ac:75:89:50:28:70:ce:c8:f9:8f:72:ac:c2:25:bc:cd:78: 38:26:53:5f:c2:f2:22:9c:b0:20:15:c3:9e:d6:f0:b0:b6:de: 32:a0:63:16:1f:05:82:de:93:48:78:53:52:b2:e8:ba:12:ff: 77:ae:cb:40:4a:11:37:fe:69:29:97:ae:0b:3e:9c:6e:53:eb: 18:ab:a2:ae:29:3b:89:35:95:40:2b:7f:16:15:27:fb:3c:fb: dc:ff:3b:d0:8e:17:1e:e9:8d:ca:18:b4:5a:7b:8e:d6:e3:67: 04:2e:3a:d5:8f:00:80:fb:f9:7c:63:6e:a0:ed:82:00:a3:64: fb:a3:0c:3b:9d:4c:a1:b8:85:f8:65:7d:77:ff:5f:f2:ac:07: ec:b8:89:a6:f3:8a:2e:1d:a5:61:44:2e:17:60:72:f9:1f:07: 55:79:d3:58 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEdrUNZODSzhym2sEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAwMzEzNTQxOVoXDTI2MDEyNDAxNDUxNVowLzEtMCsGA1UEAxMk OGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvRTVrS2dHq5itkTI+Am6Zu1rknpz3g2ZSE HO9crybIbSD4KMgkAS6gWeWCnGHqlCvgMMadXacfhK1lS4aON8bsYro/kYaO6Gqr lWcN9zw0VyyDbYAZgFv7bizWj8iTHw6AFTxSHZsh0ivWaT5ojae3WicX7V6O+GoU JSv6aHiX0CRFlEL3JqCUUPZxQjAShvpx3FBVhDZBa/vBrKdAl5Zoe3rPY8Xv8Yes Z2C2FU1431VwYDHKPyWurotGXJR9acMxOyAe4d0AMTh/Ul+L88MJ5FqhM+A2XIEe zoSS+yDt4fMLr8JZZdxUFafbmZwXqq4M/Pj6gdX1zhLaqt/vswIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFFuUaT0IzkiCFeY5lnEhIw2QqMPdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhiNTZjYWVhLTIxMzYtNDM0Mi1i YWZmLTZmMzEyNjhkNGNjNC84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4 ZDRjYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkhgDBAKM6wQwDgQCAAIwCAMGACYC+q8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/VNiP2Hdhn17jhjloaKhq3DPJNHS+q2VE9YngWzfk+Q+88rk3NQSnP u+E8XTPW7evg4lup+2FnINWBmpaKgiJDtgdYiQcpTnq/yjcq0nw7yoFVQQyVE4Kw Kj2sdYlQKHDOyPmPcqzCJbzNeDgmU1/C8iKcsCAVw57W8LC23jKgYxYfBYLek0h4 U1Ky6LoS/3euy0BKETf+aSmXrgs+nG5T6xiroq4pO4k1lUArfxYVJ/s8+9z/O9CO Fx7pjcoYtFp7jtbjZwQuOtWPAID7+XxjbqDtggCjZPujDDudTKG4hfhlfXf/X/Ks B+y4iabzii4dpWFELhdgcvkfB1V501g= -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:49 2024 by rpki-client on console-fra.rpki-client.org